@misc{indiciae77ccf23f53b6, title = {Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?}, author = {Yimeng Chen and Nathanaël Denis and Roberto Di Pietro and Jürgen Schmidhuber}, year = {2026}, url = {https://arxiv.org/abs/2607.17986}, note = {Source identifier: 2607.17986} }